$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0695/7C678148A0C111EEB223294AC4F9AE02/1p-GUNl6UkwplFPMtI13tOZf3yI.mft File: 1p-GUNl6UkwplFPMtI13tOZf3yI.mft (raw, json) Hash identifier: Qd7i0gUvRbQSXbg89HN//KYqERJd20kF2H8Xx2OUYls= Subject key identifier: 4D:7C:9F:5D:E5:A6:6D:64:F9:05:FB:84:79:BF:96:1C:73:AE:40:B9 Authority key identifier: D6:9F:86:50:D9:7A:52:4C:29:94:53:CC:B4:8D:77:B4:E6:5F:DF:22 Certificate issuer: /CN=A91F0695/serialNumber=D69F8650D97A524C299453CCB48D77B4E65FDF22 Certificate serial: 4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1p-GUNl6UkwplFPMtI13tOZf3yI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0695/7C678148A0C111EEB223294AC4F9AE02/1p-GUNl6UkwplFPMtI13tOZf3yI.mft Manifest number: 4C Signing time: Fri 17 May 2024 08:04:36 +0000 Manifest this update: Fri 17 May 2024 08:04:36 +0000 Manifest next update: Fri 24 May 2024 08:04:36 +0000 Files and hashes: 1: 1p-GUNl6UkwplFPMtI13tOZf3yI.crl (hash: SWO1UOo7jSKjwU43o+G5/VRAt85BGNFsd/JsSxAz5AY=) 2: D1054582A0C111EEA54E2F0BC4F9AE02.roa (hash: ufLJRRdUpzCQBelxO6pq55mnDbpwZDlR7ckrZNKver4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0695/7C678148A0C111EEB223294AC4F9AE02/1p-GUNl6UkwplFPMtI13tOZf3yI.crl rsync://rpki.apnic.net/member_repository/A91F0695/7C678148A0C111EEB223294AC4F9AE02/1p-GUNl6UkwplFPMtI13tOZf3yI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1p-GUNl6UkwplFPMtI13tOZf3yI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 08:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77 (0x4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0695/serialNumber=D69F8650D97A524C299453CCB48D77B4E65FDF22 Validity Not Before: May 17 08:04:36 2024 GMT Not After : May 24 08:04:36 2024 GMT Subject: CN=66470f94-c786 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:49:b0:2e:3d:4e:36:e7:02:cf:cc:3d:de:32: 53:a0:f8:99:ca:20:7b:b4:d0:25:1c:26:85:c3:5a: fd:94:ac:00:5d:33:3a:b9:82:97:8e:cb:95:92:67: b6:af:da:71:27:50:dd:18:b2:91:02:f6:3a:c7:e6: 35:ca:e1:1e:47:c5:9f:37:55:1b:d9:a1:c5:51:61: 67:23:bc:75:18:74:b8:49:3a:00:9f:73:83:30:50: 22:77:40:87:60:f2:3d:74:f9:00:55:4a:8a:d3:a3: f5:05:81:7b:2f:c7:a9:67:a3:d2:39:5f:4c:17:54: 9b:00:54:df:86:00:68:e3:91:0d:a4:2e:56:c5:d4: 3a:43:19:0f:4e:bd:67:c6:0a:aa:9c:e7:ed:fb:12: c2:cf:8c:4e:46:6c:5a:56:7c:52:51:45:30:b9:25: 2f:a5:3b:a5:12:9d:c5:53:f6:35:88:34:b5:56:c2: 2d:e9:cd:63:4c:ef:8e:3c:a7:73:31:97:78:f0:84: ac:45:b6:ee:d3:49:f3:3c:ba:8d:41:ab:ef:d8:69: 4c:0a:59:ac:df:fc:34:b0:6c:d1:78:9e:5c:43:2b: ca:ae:fe:71:f7:e9:3f:6c:7a:93:95:31:ac:f8:67: 4a:f7:41:31:c9:9c:ae:2f:ef:ea:80:42:4a:24:56: e8:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:7C:9F:5D:E5:A6:6D:64:F9:05:FB:84:79:BF:96:1C:73:AE:40:B9 X509v3 Authority Key Identifier: keyid:D6:9F:86:50:D9:7A:52:4C:29:94:53:CC:B4:8D:77:B4:E6:5F:DF:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0695/7C678148A0C111EEB223294AC4F9AE02/1p-GUNl6UkwplFPMtI13tOZf3yI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1p-GUNl6UkwplFPMtI13tOZf3yI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0695/7C678148A0C111EEB223294AC4F9AE02/1p-GUNl6UkwplFPMtI13tOZf3yI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:7d:45:ae:8d:96:ed:96:e5:67:f2:3e:89:23:44:d8:c9:a9: c2:35:bb:bc:19:c3:01:e5:9e:df:79:4a:d1:f6:26:14:2f:c7: e7:5c:bb:09:d9:0e:7d:14:23:dc:dd:c4:85:28:aa:bf:ab:0c: 1e:5c:03:7d:9a:e4:16:b6:44:23:93:25:3a:97:c3:df:18:98: 36:e8:1d:21:77:bf:ff:e0:2c:6a:93:e7:28:43:8e:4e:e0:62: 85:32:d3:c2:8a:c1:39:a2:ae:a2:0d:68:ca:ce:25:89:c8:b7: 06:75:c3:6e:59:f4:66:8f:94:aa:55:ea:d6:36:c0:f3:55:52: 89:89:84:50:72:b4:39:f6:7c:f4:a5:9f:4b:5a:e8:38:fb:d7: f9:63:7b:cb:33:e8:09:a0:82:75:af:2d:6f:b2:0f:bd:12:45: b2:74:5a:d0:59:32:ce:5a:9a:19:39:e1:c0:35:8d:31:17:43: c9:79:73:da:23:32:cc:77:ac:55:5d:34:96:b7:cb:b1:5c:3c: ff:a8:f5:d5:cf:b4:27:12:da:2e:7f:54:3d:e6:6b:f7:07:3b: f8:f5:c5:05:b2:f0:49:c4:41:8d:e7:55:dc:00:6d:c5:41:5b: 82:fa:f2:85:42:58:e2:41:b4:2c:7d:40:06:d3:0c:88:3a:a2: d4:fc:03:ac -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MDY5NTExMC8GA1UEBRMoRDY5Rjg2NTBEOTdBNTI0QzI5OTQ1M0NDQjQ4RDc3QjRF NjVGREYyMjAeFw0yNDA1MTcwODA0MzZaFw0yNDA1MjQwODA0MzZaMBgxFjAUBgNV BAMTDTY2NDcwZjk0LWM3ODYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBSbAuPU425wLPzD3eMlOg+JnKIHu00CUcJoXDWv2UrABdMzq5gpeOy5WSZ7av 2nEnUN0YspEC9jrH5jXK4R5HxZ83VRvZocVRYWcjvHUYdLhJOgCfc4MwUCJ3QIdg 8j10+QBVSorTo/UFgXsvx6lno9I5X0wXVJsAVN+GAGjjkQ2kLlbF1DpDGQ9OvWfG Cqqc5+37EsLPjE5GbFpWfFJRRTC5JS+lO6USncVT9jWINLVWwi3pzWNM7448p3Mx l3jwhKxFtu7TSfM8uo1Bq+/YaUwKWazf/DSwbNF4nlxDK8qu/nH36T9sepOVMaz4 Z0r3QTHJnK4v7+qAQkokVug7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTXyfXeWm bWT5BfuEeb+WHHOuQLkwHwYDVR0jBBgwFoAU1p+GUNl6UkwplFPMtI13tOZf3yIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYwNjk1LzdDNjc4MTQ4QTBD MTExRUVCMjIzMjk0QUM0RjlBRTAyLzFwLUdVTmw2VWt3cGxGUE10STEzdE9aZjN5 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMXAtR1VObDZVa3dwbEZQTXRJMTN0T1pmM3lJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYw Njk1LzdDNjc4MTQ4QTBDMTExRUVCMjIzMjk0QUM0RjlBRTAyLzFwLUdVTmw2VWt3 cGxGUE10STEzdE9aZjN5SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGR9Ra6Nlu2W5WfyPokjRNjJqcI1u7wZwwHlnt95StH2JhQvx+dcuwnZ Dn0UI9zdxIUoqr+rDB5cA32a5Ba2RCOTJTqXw98YmDboHSF3v//gLGqT5yhDjk7g YoUy08KKwTmirqINaMrOJYnItwZ1w25Z9GaPlKpV6tY2wPNVUomJhFBytDn2fPSl n0ta6Dj71/lje8sz6AmggnWvLW+yD70SRbJ0WtBZMs5amhk54cA1jTEXQ8l5c9oj Msx3rFVdNJa3y7FcPP+o9dXPtCcS2i5/VD3ma/cHO/j1xQWy8EnEQY3nVdwAbcVB W4L68oVCWOJBtCx9QAbTDIg6otT8A6w= -----END CERTIFICATE-----Generated at Fri May 17 08:52:56 2024 by rpki-client on console-ams.rpki-client.org